Taiwan Cyber Incidents in 2025: Fake Messaging Apps, Custom Ransomware, Supply Chain Vulnerabilities
Key TakeawaysIncident Volume: Taiwan documented over 700 governmental cybersecurity incidents throughout the 2025 fiscal period.Threat Vectors: Unauthorized access remains the primary driver, accounting for almost…
Key TakeawaysMulti-Registry Campaign: A supply chain attack tracked as TrapDoor targets developers via npm, PyPI, and Crates.io packages.Extensive Credential Theft: The malware steals SSH keys,…
Key TakeawaysExtortion Campaign: The ShinyHunters pay-or-leak attack against 7-Eleven resulted in the compromise of over 185,000 unique email addresses and personal details.System Scope: 7-Eleven stated…
Key TakeawaysCritical Vulnerability Exploitation: Threat actors are actively leveraging CVE-2026-26980 within Ghost CMS to execute ClickFix attack workflows.Extensive Domain Compromise: XLab threat intelligence has identified…
Steffan Tomlinson - Cyera Steffan Tomlinson became a board member at Cyera, an AI security company focused on data protection and exposure management. He currently…
Key TakeawaysX-VPN Membership Update: X-VPN joined VPN Trust Initiative and i2Coalition to support industry privacy and security standards.Industry Collaboration: Memberships help X-VPN align with transparency,…
Key TakeawaysNordVPN blocking dispute: Spanish court rejected LaLiga’s request for fines over alleged blocking order non-compliance.Overblocking concerns: NordVPN argued IP-level blocking disrupted legitimate websites, cloud…
A sweeping wave of international crackdowns sent shockwaves through the cybercriminal ecosystem this week, with authorities dismantling banking malware operations, VPN infrastructure, malware-signing services, DDoS…
Key TakeawaysTargeted attack geographies: Cloud Atlas affects government and commercial entities in Russia and Belarus.Initial infection vectors: Attackers utilize phishing emails containing LNK files and…
Key TakeawaysVulnerability Window: Google API keys remain active for up to 23 minutes post-deletion, a recent cybersecurity report warned.Exploitation Risks: Attackers could reportedly extract Gemini…
Key TakeawaysSuspected KimWolf admin: Police arrested an individual using the alias Dort in connection with the development and operation of the KimWolf DDoS-for-hire service.Extradition arrest…
Key TakeawaysNewly Discovered Linux Malware: Black Lotus Labs has characterized Showboat, a sophisticated post-exploitation framework that has been operational since mid-2022.PRC-Aligned Threat: Attribution links the…
Key TakeawaysFirst VPN Takedown: Europol-led operation seized 33 servers and exposed hundreds of suspected cybercriminal users globally.International Investigation: Authorities from seven countries coordinated Operation Saffron…
Key TakeawaysFirefox free VPN expansion: Mozilla added selectable servers in five countries and plans additional locations soon.Monthly usage limits: Firefox’s free VPN includes 50GB monthly…
Key TakeawaysMAX app surveillance claims: Researcher alleges MAX records chats, detects VPNs, and bypasses standard Android update protections.Code review findings: RKS Global confirmed several allegations…
Key TakeawaysMullvad fingerprinting issue: Websites could potentially link users switching VPN servers through matching exit IP assignment patterns.User guidance: Mullvad recommends re-logging before server changes…
Key TakeawaysIPVanish VPN Network: Expanded beyond 150 global server locations with 3,400 servers and 56,000 IP addresses.RAM-Only Servers: IPVanish added nearly 1,000 RAM-only servers across…
Key TakeawaysMassive Data Compromise: An international cybercrime operation breached nearly 30,000 customer accounts targeting a California-based online retailer.Significant Financial Impact: Threat actors executed $721,000 in…
Key TakeawaysSupply Chain Attack: Compromised art-template package versions injected malicious loaders into web environments.Exploit Kit Delivery: The payload targets iOS Safari users via sophisticated watering-hole…
Key TakeawaysData Exposure: Trump Mobile is currently leaking sensitive customer records, specifically mailing and email addresses, reports say.Independent Verification: High-profile purchasers of the T1 smartphone…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
